Fedora 13 : evince-2.30.3-2.fc13 (2011-0224)

Thu Jan 6 2011 Marek Kasik - 2.30.3-2 - Fixes CVE-2010-2640, CVE-2010-2641, CVE-2010-2642 and CVE-2010-2643 - Resolves: 667573 - Fri Jun 25 2010 Marek Kasik - 2.30.3-1 - Update to 2.30.3 - Tue Jun 22 2010 Marek Kasik - 2.30.2-1 - Update to 2.30.2 resolves 587495 - Remove unused patches - Tue Jun...

Fedora 13 : webkitgtk-1.2.6-1.fc13 (2011-0121)

New stable release, API and ABI compatible with previous 1.2.x versions - Fixes crashes with newer libpng = 1.4 - The patches to fix the following CVEs are included with help from Huzaifa Sidhpurwala from the Red Hat security team CVE-2010-4198 CVE-2010-4197 CVE-2010-4204 CVE-2010-4206...

Fedora 13 : pidgin-2.7.9-1.fc13 (2010-19317)

New release 2.7.9 Upstream ChangeLog : http://developer.pidgin.im/wiki/ChangeLog Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without...

Ubuntu 9.10 / 10.04 LTS / 10.10 : apparmor update (USN-1039-1)

It was discovered that if AppArmor was misconfigured, under certain circumstances the parser could generate policy using an unconfined fallback execute transition when one was not specified. Note that Tenable Network Security has extracted the preceding description block directly from the Ubuntu...

Ubuntu 9.10 / 10.04 LTS / 10.10 : dpkg vulnerability (USN-1038-1)

Jakub Wilk and Raphael Hertzog discovered that dpkg-source did not correctly handle certain paths and symlinks when unpacking source-format version 3.0 packages. If a user or an automated system were tricked into unpacking a specially crafted source package, a remote attacker could modify files...

Fedora 13 : maniadrive-1.2-23.fc13 / php-5.3.4-1.fc13.1 / php-eaccelerator-0.9.6.1-3.fc13 (2010-19011)

Security Enhancements and Fixes in PHP 5.3.4 : - Fixed crash in zip extract method possible CWE-170. - Paths with NULL in them foo\0bar.txt are now considered as invalid CVE-2006-7243. - Fixed a possible double free in imap extension Identified by Mateusz Kocielski. CVE-2010-4150. - Fixed NULL...

Fedora 14 : perl-IO-Socket-SSL-1.37-1.fc14 (2010-19058)

This update fixes a problem whereby IO::Socket::SSL fell back to the 'VERIFYNONE' verification mode if another verification mode was defined but no valid cafile or capath was provided. The updated version throws an error in that situation rather than proceeding with the connection despite being...

Fedora 13 : perl-IO-Socket-SSL-1.37-1.fc13 (2010-19054)

This update fixes a problem whereby IO::Socket::SSL fell back to the 'VERIFYNONE' verification mode if another verification mode was defined but no valid cafile or capath was provided. The updated version throws an error in that situation rather than proceeding with the connection despite being...

Fedora 14 : dbus-1.4.0-2.fc14 (2010-19166)

You need to reboot to apply this update. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL...

FreeBSD : tor -- remote crash and potential remote code execution (4bd33bc5-0cd6-11e0-bfa4-001676740879)

The Tor Project reports : Remotely exploitable bug that could be used to crash instances of Tor remotely by overflowing on the heap. Remote-code execution hasn't been confirmed, but can't be ruled out. Everyone should upgrade. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive...

Dell Integrated Remote Access Controller (iDRAC) Web Interface Detection

The web interface for Dell Integrated Remote Access Controller iDRAC, formerly known as Dell Remote Access Controller DRAC, was detected on the remote host. C Tenable, Inc. Thanks to Jason Haar for his help! include'compat.inc'; if description scriptid51185; scriptversion"1.32";...

Fedora 14 : thunderbird-3.1.7-2.fc14 (2010-18777)

Update to new upstream Thunderbird version 3.1.7, fixing multiple security issues detailed in the upstream advisory : http://www.mozilla.org/security/known-vulnerabilities/thunderbird31.ht mlthunderbird3.1.7 Note that Tenable Network Security has extracted the preceding description block directly...

Ubuntu 10.04 LTS / 10.10 : thunderbird, thunderbird-locales vulnerabilities (USN-1020-1)

Jesse Ruderman, Andreas Gal, Nils, Brian Hackett, and Igor Bukanov discovered several memory issues in the browser engine. An attacker could exploit these to crash THunderbird or possibly run arbitrary code as the user invoking the program. CVE-2010-3776, CVE-2010-3777, CVE-2010-3778 Marc...

Ubuntu 6.06 LTS / 8.04 LTS / 9.10 / 10.04 LTS / 10.10 : krb5 vulnerabilities (USN-1030-1)

It was discovered that Kerberos did not properly determine the acceptability of certain checksums. A remote attacker could use certain checksums to alter the prompt message, modify a response to a Key Distribution Center KDC or forge a KRB-SAFE message. CVE-2010-1323 It was discovered that Kerber...

IceWarp Webmail Detection

The remote web server hosts IceWarp, a webmail application. C Tenable Network Security, Inc. include'compat.inc'; if description scriptid51097; scriptversion"1.7"; scriptcvsdate"Date: 2019/11/22"; scriptnameenglish:"IceWarp Webmail Detection"; scriptsummaryenglish:"Checks for IceWarp Webmail";...

Fedora 14 : krb5-1.8.2-7.fc14 (2010-18409)

This update incorporates the upstream patches to correct bugs outlined in MITKRB5-SA-2010-007 CVE-2010-1323, CVE-2010-1324, and CVE-2010-4020. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to...

Ubuntu 6.06 LTS / 8.04 LTS / 9.10 / 10.04 LTS / 10.10 : openssl vulnerabilities (USN-1029-1)

It was discovered that an old bug workaround in the SSL/TLS server code allowed an attacker to modify the stored session cache ciphersuite. This could possibly allow an attacker to downgrade the ciphersuite to a weaker one on subsequent connections. CVE-2010-4180 It was discovered that an old bug...

Ubuntu 10.04 LTS : paste vulnerability (USN-1026-1)

It was discovered that Python Paste did not properly sanitize certain strings, resulting in cross-site scripting XSS vulnerabilities. With cross-site scripting vulnerabilities, if a user were tricked into viewing server output during a crafted server request, a remote attacker could exploit this ...

Ubuntu 6.06 LTS / 8.04 LTS / 9.10 / 10.04 LTS / 10.10 : apache2 vulnerabilities (USN-1021-1)

It was discovered that Apache's modcache and moddav modules incorrectly handled requests that lacked a path. A remote attacker could exploit this with a crafted request and cause a denial of service. This issue affected Ubuntu 6.06 LTS, 8.04 LTS, 9.10 and 10.04 LTS. CVE-2010-1452 It was discovere...

AIX 610006 : U834365

The remote host is missing AIX PTF U834365 which is related to the security of the package bos.rte.security.6.1 You should install this PTF for your system to be up-to-date. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. if ! definedfunc"bnrandom" exit0; include'deprecatednasllevel.inc';...